The basic principle of preventing a website from being hung

The basic principle of preventing a website from being hung

1. Server installation anti-virus software and professional Trojan protection software, timely repair server system vulnerabilities.

2. Web site Admin username and Password must have a certain complexity, not too simple, but also pay attention to regular replacement.

3. Try to use the normal ASP Web site management program, and modify the default database name and storage path, database file name not too simple.

4. Update the website procedure in time, do not add the link of the Backstage Management Program login page on the webpage.

5. Always back up the site of the whole station program, database, etc., database files do not use. asp suffix.

6. Check the website source files regularly, and clear the ASP files of unknown origin in the website program.

7. Once found to be invaded, unless you can identify all the Trojan files, or to delete all files.

8. Use hacker tools, often check your web site procedures to see if there is a leak injection.

Of course, invasion and anti-invasion is a never-ending war, site managers only do a variety of preventive measures, and constantly strengthen the server and Web site security management, in order to more effectively prevent or reduce the potential of the site is hanging horse.

In the previous period, the client's superior authorities conducted a comprehensive host vulnerability analysis for the entire information system of the client unit. Because the customer unit's information security requirements are high, this vulnerability analysis has done a very comprehensive, found a lot of security vulnerabilities, especially on the network of Windows host is a lot of suggestions for rectification.

In the implementation of these rectification opinions, the process of repairing the host, the author found that the computer involved is very much, the workload is very large, relying on human resources to operate on a computer is basically impossible. At this time, I think of the Windows system, a powerful management tool-Group Policy. With Group Policy batch change configuration characteristics, with the use of computer startup scripts, the entire security repair work is done in only one day, and it may take at least one months to operate on a computer-by-machine basis.